© 2026 vulntracker.io

CVE-2014-9529

N/A

Published: January 9, 2015 at 09:00 PM UTC

Updated: June 17, 2026 at 12:18 AM UTC

11 products affected across 6 vendorsLinux KernelDebian LinuxFedora

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.3%

Description

Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

10.04 12.04 14.04 14.10

Debian Linux · Debiandrupal

95%

Fedora · Fedora Projectrpm

95%

Linux Kernel · Linux

95%

v < 3.2.673.11 ≤ v ≤ 3.12.373.13 ≤ v ≤ 3.14.313.15 ≤ v < 3.16.353.17 ≤ v < 3.18.53.3 ≤ v < 3.4.1073.5 ≤ v < 3.10.67

Affected range stops below 3.10.67, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.16.35, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.18.5, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.2.67, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.4.107, so it looks safe — our inference, not a vendor statement

openSUSE · openSUSE

95%

Enterprise Linux Desktop · Red Hatrubygems

95%

Enterprise Linux Server · Red Hatrubygems

95%

Enterprise Linux Server Aus · Red Hatrubygems

95%

6.6 7.3 7.4 7.6 7.7

Enterprise Linux Server Eus · Red Hatrubygems

95%

6.6 7.1 7.2 7.3 7.4 7.5 7.6 7.7

Enterprise Linux Server Tus · Red Hatrubygems

95%

6.6 7.3 7.6 7.7

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (23)

x_refsource_CONFIRMBroken Link

Source: [email protected]

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a3a8784454692dd72e5d5d34dcdab17b4420e74c

Vendor Advisoryx_refsource_FEDORAThird Party Advisory

Source: [email protected]

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147864.html

Vendor Advisoryx_refsource_FEDORAThird Party Advisory

Source: [email protected]

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147973.html

Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory

Source: [email protected]

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html

Vendor Advisoryx_refsource_REDHATThird Party Advisory

Source: [email protected]

http://rhn.redhat.com/errata/RHSA-2015-0864.html

Vendor Advisoryx_refsource_REDHATThird Party Advisory

Source: [email protected]

http://rhn.redhat.com/errata/RHSA-2015-1137.html

Vendor Advisoryx_refsource_REDHATThird Party Advisory

Source: [email protected]

http://rhn.redhat.com/errata/RHSA-2015-1138.html

Vendor Advisoryx_refsource_DEBIANThird Party Advisory

Source: [email protected]

http://www.debian.org/security/2015/dsa-3128

CVSS

6.9MEDIUM[email protected]

Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-362

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card